Deploy / deploy (build, debian, 22) (push) Canceled after 0s
- 登录返回 15 分钟的 access token(HS256,密钥 JWT_SECRET,未配置则每次启动随机) 和 14 天的 refresh token;请求带 Authorization: Bearer,WebSocket 用 ?token= - refresh token 只存 sha256,放在新表 auth_refresh_token(删除旧的 auth_session); POST /account/refresh 换新的 access token,退出、改密码、封号时作废 - 带了无效或过期的 token 一律 401,前端据此刷新:快过期时提前刷新、并发请求只刷新一次, 401 时刷新后重试一次,refresh token 也失效才退出登录 - 不再用 cookie,去掉 CORS credentials 和写请求的 Origin 校验 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
56 lines
1.2 KiB
Vue
56 lines
1.2 KiB
Vue
<script setup lang="ts">
|
|
import { dateZhCN, zhCN } from "naive-ui"
|
|
import type { GlobalThemeOverrides } from "naive-ui"
|
|
import Login from "./components/Login.vue"
|
|
import { onMounted } from "vue"
|
|
import { Account } from "./api"
|
|
import { user } from "./store/user"
|
|
import hljs from "highlight.js/lib/core"
|
|
|
|
const themeOverrides: GlobalThemeOverrides = {
|
|
common: {
|
|
borderRadius: "6px",
|
|
borderRadiusSmall: "4px",
|
|
},
|
|
Card: {
|
|
borderRadius: "8px",
|
|
},
|
|
}
|
|
|
|
onMounted(async () => {
|
|
try {
|
|
const data = await Account.getMyProfile()
|
|
user.loaded = true
|
|
user.username = data.username
|
|
user.role = data.role
|
|
} catch {
|
|
user.loaded = true
|
|
}
|
|
})
|
|
</script>
|
|
|
|
<template>
|
|
<n-config-provider
|
|
class="myContainer"
|
|
:locale="zhCN"
|
|
:date-locale="dateZhCN"
|
|
:hljs="hljs"
|
|
:theme-overrides="themeOverrides"
|
|
>
|
|
<n-modal-provider>
|
|
<n-message-provider :max="1">
|
|
<n-dialog-provider>
|
|
<router-view></router-view>
|
|
<Login />
|
|
</n-dialog-provider>
|
|
</n-message-provider>
|
|
</n-modal-provider>
|
|
</n-config-provider>
|
|
</template>
|
|
<style scoped>
|
|
.myContainer {
|
|
height: 100vh;
|
|
width: 100vw;
|
|
}
|
|
</style>
|